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Ref # 


Hits 


Search Query 


DBS 


Default 
Operator 


Plurals 


Time Stamp 


S26 


47 


("20050081 044 1 
"20060015513" 
"6118771" "5956391" 
"6058421" "6065049" 
"6240464" "5950195" 
"6049826" "6061739" 
"6061739" "6070246" 
"6115545" "6170061" 
"6189102" "6195689" 
"6195705" "6212563" 
"6223222" "6212563" 
"6223222" "5708654" 
"5724510" "5790548" 
"5812819" "5835727" 
"5835723" "5848233" 
"5854901" "5872523" 
"5884024" "5918016" 
"5922049" "5941956" 
"5974453" "5987524" 
"6009103" "6012088" 
"6014687" "6023464" 
"6023724" "6028848" 
"6029196" "6029203" 
"6052803" "6070242" 
"6070187" "6073178" 
"6076110" "6085321" ). 
pn. 


US-FGPUB; 
USPAT 


OR 


ON 


2009/03/17 
09:05 


S27 


50 


("6301254" "6987726" 
"6990316" "7200130" 
"20020044549" 
"20020154607" 
"20030096577" 
"4868743" "4884263" 
"4897834" "4965792" 
"5109344" "5198805" 
"5241534" "5297139" 
"5307353" "5309431" 
"5317439" "5334970" 
"5416721" "5425026" 
"5469428" "5523765" 
"5550714" "5602585" 
"5603020" "5604748" 
"5614899" "5719881" 
"5752003" "5793948" 
"5801861" "5805705" 
"5828655" "5828670" 
"5845272" "5848238" 
"5867644" "5889761" 
"5896496" "5922078" 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/17 
09:34 
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"5935267" "6084543" 
"6088125" "6098015" 
"6115393" "6128318" 
"6151694" "6253195" 
"6269404" ).pn. 










S28 


88217 


nids "network intrusion 
detection system" SMS 
(service$1 adj 
management adj 
system) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/17 
09:54 


S29 


1124001 


monitor query collect 
poll 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/17 
09:54 


S30 


105657 


network near2 
information 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/17 
09:54 


S31 


6192 


S29 with S30 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/17 
09:55 


S32 


54 


S28 same S31 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/17 
09:55 


S33 


1 


10/402649.app. 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/17 
12:13 


S34 


1 


("5821937"). PN. 


US-PGPUB; 
USPAT 


OR 


OFF 


2009/03/19 
08:45 


S35 


99 


("5394522"). PN. OR 
("5821 937"). URPN. 


US-PGPUB; 

USPAT 

USOCR 


OR 


ON 


2009/03/19 
08:48 


S36 


0 


active near2 OS adj 
fingerprint$3 


US-PGPUB; 

USPAT 

USOCR 


OR 


ON 


2009/03/19 
09:56 


S37 


64 


OS adj f inger pr int$3 


US-PGPUB; 

USPAT 

USOCR 


OR 


ON 


2009/03/19 
09:56 


S38 


6 


S37 same active 


US-PGPUB; 

USPAT 

USOCR 


OR 


ON 


2009/03/19 
09:56 


S39 


90 


("operating system" OS) 
adj fingerprint$3 


US-PGPUB; 

USPAT 

USOCR 


OR 


ON 


2009/03/19 
10:11 


S40 


100375 


"90" same active 


US-PGPUB; 

USPAT; 

USOCR 


OR 


ON 


2009/03/19 
10:11 


S41 


10 


S39 same active 


US-PGPUB; 

USPAT; 

USOCR 


OR 


ON 


2009/03/19 
10:11 


S42 


0 


370/254,255.ccls 


US-PGPUB; 

USPAT; 

USOCR 


OR 


ON 


2009/03/19 
10:35 


S43 


29018 


370/254.ccls. 370/255. 
CCls 709/224.CCIS. 
709/223.CCIS "726".clas. 


US-PGPUB; 

USPAT; 

USOCR 


OR 


ON 


2009/03/19 
10:36 
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S44 


291 


icmp same query 


US-FGPUB; 
USPAT 


OR 


ON 


2009/03/19 
10:42 


S45 |1 


S39 and S44 


US-FGPUB; 
USPAT 


OR 


ON 


2009/03/19 
10:42 


S46 


2 


icmp same query same 
fingerprint 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
10:42 


S47 


5 


S39 same query 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
10:44 


S48 


72 


(icmp arp tcp-syn syn) 
same2 fingerprint 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
11:59 


S49 


38 


(icmp arp tcp-syn syn) 
same fingerprint 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
12:00 


550 


o 


60/ 527542. app. 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
12:06 


S51 


0 


60/ 535890. app. 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
12:06 


S52 


16 


(amap nmap) same 
fingerprint 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
14:25 


S53 


1 


09/ 874574. app. 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
14:32 


S54 


741263 


(hardware topology 
runtime (running near2 
process$2) same 
fingerprint) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
14:45 


S55 


2430 


(hardware topology 
runtime (running near2 
process$2)) same 
fingerprint 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
14:45 


S56 


1065 


(hardware topology 
runtime (running near2 
process$2)) with 
fingerprint 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
14:45 


S57 


244 


S56 same network 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
14:46 


S58 


0 


"60" ".""499390". app. 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
15:12 


S59 


0 


60/499490.app. 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
15:12 


S60 


12803 


(detect discover 
fingerprint) same 
(((runtime running) with 
(information process$2)) 
(hardware near2 
(component 
information)) topology) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
15:30 


S61 


1080 


S43 and S60 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
15:31 
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S62 


1044 


S61 and network 


US-FGPUB; 
USPAT 


OR 


ON 


2009/03/19 
15:31 


S63 


11229 


(detect discover 
fingerprint) same 
(((runtime running) with 
process$2) (hardware 
near2 (component 
information)) topology) 


US-FGPUB; 
USPAT 


OR 


ON 


2009/03/19 
15:32 


S64 


1830584 


(detect discover 
fingerprint monitor poll 
query collect gather) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
15:32 


S65 


1391766 


(sensor probe analyze) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
15:33 


S66 


125571 


(node nodal network) 
near2 information 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
15:33 


S67 


1872438 


(transparent passive 
active) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
15:34 


S68 


952522 


(security secure NIDS 
(intrusion adj 
detection)) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
15:34 


S69 


479698 


S64 same S65 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
15:35 


S70 


479698 


S69 same S65 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
15:35 


S71 


1932 


S69 same S66 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
15:36 


S72 


387 


S71 same2 S68 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
15 36 


S73 


145 


S43 and S72 


USPGPUB; 
USPAT 


OR 


ON 


2009/03/19 
15:36 


S74 


0 


(test near2 polic$3) with 
(generate near5 
(message query)) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
16:27 


S75 


397 


(test near2 polic$3) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
16:28 


S76 


16 


S75 same query 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
16:28 


S77 


902 


(send transmit) near2 
message with policy 


USPGPUB; 
USPAT 


OR 


ON 


2009/03/19 
16:43 


S78 


157 


(send transmit) near2 
message with policy 
with (device node 
equipment) 


1 IO ryTll id- 
US- HjHJd, 

USPAT 


OR 


ON 


^uuy/uj/ 1 y 

16:44 


S79 


54 


(send transmit) near2 
message with 
(according based) with 
(policy rule) with (device 
node equipment) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
16:59 
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S80 


263 


(send transmit) near2 
message with 
(according based) with 
(policy rule) 


US-FGPUB; 
USPAT 


OR 


ON 


2009/03/19 
17:11 


S81 


39 


S43 and S80 


US-FGPUB; 
USPAT 


OR 


ON 


2009/03/19 
17:11 


S82 


15 


(send transmit) near2 
message with 
(according based) with 
(policy rule) same 
protocol 


US-PGPUB 
USPAT 


OR 


ON 


2009/03/19 
17:12 


S83 


270 


(send transmit) near2 
(message protocol) with 
(according based) with 
(policy rule) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
17:15 


S84 


29018 


370/254. eels. 370/255. 
cols 709/224.ccls. 
709/223.CCIS "7267. 
das. 


US-PGPUB; 

USPAT 

USOCR 


OR 


ON 


2009/03/19 
17:19 


S85 


5739 


"7267. clas. and policy 


US-PGPUB; 

USPAT; 

USOCR 


OR 


ON 


2009/03/19 
17:19 


S86 


822418 


(message rule) 


US-PGPUB; 

USPAT; 

USOCR 


OR 


ON 


2009/03/19 
17:19 


S87 


4905 


S85 and S86 


US-PGPUB; 

USPAT; 

USOCR 


OR 


ON 


2009/03/19 
17:19 


S88 


65 


test adj policy 


US-PGPUB 

USPAT; 

USOCR 


OR 


ON 


2009/03/19 
17:20 


S89 


20 


S88 and "7267. clas. 


US-PGPUB; 

USPAT; 

USOCR 


OR 


ON 


2009/03/19 
17:20 


S90 


70 


("20030145039" | 
"20030182598" | 
"20030212910" | 
"4666426" | "5088033" | 
"5097469" | "5297138" | 
"5339403" | "5371852" | 
"5432789" | "5465251" | 
"5508941" | "5581788" | 
"5602998" | "5606664" | 
"5678059" | "5684796" | 
"5684959" | "5710885" | 
"5727157" | "5729685" | 
"5732086" | "5734824" | 
"5737319" | "5798772" | 
"5819292" | "5850397" | 
"5872976" | "5884036" | 
"5903559" | "5918018" | 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
17:29 
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"5926462" | "5933416" | 
"5958010" | "5983350" | 
"6012081" | "6038570" | 
"6041363" | "6047323" | 
"6075776" | "6108702" | 
"6120676" | "6143164" | 
"6179489" | "6205122" | 
"6219707" | "6249863" | 
"6317844" | "6324168" | 
"6331985" | "6343984" | 
"6385724" | "6415321" | 
"6457130" | "6468150" | 
"6469987" | "6487665" | 
"6546553" | "6551494" | 
"6574736" | "6576101" | 
"6604118" | "6604198" | 
"6606711" | "6628623" | 
"6697338" | "6772417" | 
"6788980" | "6799195" | 
"6807667" ).PN. 










S91 


29 


S90 and (policy rule) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
17:30 


S92 


1 


("6795403"). PN. 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
17:45 


S93 


0 


S92 and (policy rule) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
17:46 


S94 


0 


S92 and (runtime 
(running near2 
process)) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
17:46 


S95 


14907 


"70" and (runtime 
(running near2 
process)) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
17:46 


S96 


14 


S90 and (runtime 
(running near2 
process)) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
17:46 


S97 


168 


(dhcp same arp same 
(tcp tcp$1syn)) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
17:51 


S98 


139 


(dhcp with arp same 
(tcp tcp$1syn)) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
17:51 


S99 


107 


(dhcp with arp with (tcp 
tcp$1syn)) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
17:51 


S100 


1497 


policy with statistic$2 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
18:19 


S101 


217 


S43 and S100 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
18:19 


S102 


216 


network and S101 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
18:20 


S103 


34 


dhcp and S101 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/19 
18:20 



file:///CI/Documents< Oand Settin in kul 1 ID 154 EASTSearchHistory.l05S0543_AccessibleVersion.htm (6 of 8)3/26/2009 4:49:50 PM 



EAST Search History 



S104 


397 


test near2 polic$3 


USPAT 


OR 


ON 


2009/03/23 
08:12 


S105 


29018 


370/254.ccls. 370/255. 
eels 709/224.ccls. 
709/223.CCIS "726".clas. 


US-FGPUB; 

USPAT 

USOCR 


OR 


ON 


2009/03/23 
08:12 


S106 


81 


S105 and S104 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23 
08:12 


S107 


40153 


run$5 near process 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23 
08:27 


S108 


2117 


S105 and S107 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23 
08:27 


S109 


664 


(poll query obtain) with 
S107 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23 
08:28 


S1 10 


46 


S105 andS109 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23 
08:28 


S111 


61524 


run$5 near2 process 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23 
16:55 


S1 12 


1120 


(poll query obtain) with 
S1 11 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23 
16:55 


S1 13 


29018 


370/254.ccls. 370/255. 
eels 709/224.CCIS. 
709/223.ccls "726".clas. 


US-PGPUB; 

USPAT 

USOCR 


OR 


ON 


2009/03/23 
16:55 


S1 14 


79 


S113andS112 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23 
16:55 


S1 15 


1878 


(snmp mib) and S111 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23 
16:56 


S1 16 


70 


(snmp mib) with S1 1 1 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23 
16:56 


si 17 


2762013" 


(poll query obtain 
monitor detect) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23' 
16:59 


S1 18 


10 


S116withS117 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23 
17:00 


S1 19 


915 


(data near2 collect$3) 
same (run$4 near2 
process) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23 
17:32 


S120 


1303 


(data near2 collect$3) 
same (run$4 near2 
process$2) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23 
17:32 


SI 21 


528 


(data near2 collect$3) 
with (run$4 near2 
process$2) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23 
17:32 


S122 


1 


("71 93968"). PN. 


US-PGPUB; 
USPAT 


OR 


OFF 


2009/03/23 
17:34 


S123 


55 


(data near2 collect$3) 
with (run$4 near2 
process$2) with network 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23 
17:37 
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S124 


541 


(data near2 collect$3) 
with (run-time runtime 
"run time" near2 
(information process$2)) 


US-FGPUB; 
USPAT 


OR 


ON 


2009/03/23 
18:36 


S125 


879 


(data near2 ( monitor 
query collect$3)) with 
(run-time runtime "run 
time" near2 (information 
process$2)) 


US-FGPUB; 
USPAT 


OR 


ON 


2009/03/23 
18:37 


S126 


103 


network same S125 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23 
18:37 


S127 


884 


(data near2 ( monitor 
query collect$3)) with 
(run-time runtime "run 
time" near2 (information 
process$2 application)) 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23 
18:38 


S128 


0 


netowrk same S127 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23 
18:38 


S129 


107 


network same S127 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23 
18:38 


S130 


17 


S113andS129 


USPGPUB; 
USPAT 


OR 


ON '2009/03/23 
|1 8:39 


S131 


90 


(network same S127) 
not S130 


US-PGPUB; 
USPAT 


OR 


ON 


2009/03/23 
18:42 



3/26/2009 4:49:35 PM 



file:///CI/Doci 



kul 1 ID 154 EASTSearchffistory.l05S0543_AccessibleVersion.htm(SofS)3 < 009 4:49:50PM 



